Telnet and SSH

Answered Question
Apr 5th, 2010

Is it possible to have another public IP address (i.e. 66.102.7.000) to telnet and SSH to the ASA 5510 remotely?  If it is possible, how would you setup the telnet and SSH?  Attached is the config.  Thanks.

Laura

Attachment: 
I have this problem too.
0 votes
Correct Answer by Jon Marshall about 6 years 8 months ago

laurabolda wrote:

Thanks for your prompt response again, Jon.  Your command works.  But, I am not able to SSH to the ASA from my computer 66.102.7.10.  In your previous reply, you said I need to setup the domain name, crypo key generated, etc.  How do I setup all the prerequisities so that I can SSH to the ASA?

Also, can I setup SSH on the selected subnet?  For example, can I do this?

SSH outside 66.102.7.0 255.255.255.0

and

SSH outside 66.102.16.0 255.255.255.0

Thanks.

Laura

Laura

This doc gives the full details for setting up SSH on an ASA firewall -

ASA ssh configuration

Yes you can use a subnet rather than a host entry as you have done above.

Jon


Correct Answer by Jon Marshall about 6 years 8 months ago

laurabolda wrote:

Thanks for your prompt response, Jon.

For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA?  Is it the same command as your previous response?

Thanks.

Laura

Laura yes it would be -

ssh outside 66.102.7.10 255.255.255.255

Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Jon Marshall Mon, 04/05/2010 - 08:41

Laura

SSH yes, telnet no.

You cannot telnet from the outside of the ASA to the ASA itself unless the telnet is within an IPSEC tunnel.

For ssh, assuming all the other other things have been setup ie. domain name, crypto key generated etc..

ciscoasa(config)# ssh 66.102.7.1 outside

Jon

Cisco are currently donating money to the Haiti earthquake appeal for every rating so please consider rating all helpful posts.

laurabolda Mon, 04/05/2010 - 08:58

Thanks for your prompt response, Jon.

For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA?  Is it the same command as your previous response?

Thanks.

Laura

Correct Answer
Jon Marshall Mon, 04/05/2010 - 09:26

laurabolda wrote:

Thanks for your prompt response, Jon.

For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA?  Is it the same command as your previous response?

Thanks.

Laura

Laura yes it would be -

ssh outside 66.102.7.10 255.255.255.255

Jon

laurabolda Mon, 04/05/2010 - 10:19

Thanks for your prompt response again, Jon.  Your command works.  But, I am not able to SSH to the ASA from my computer 66.102.7.10.  In your previous reply, you said I need to setup the domain name, crypo key generated, etc.  How do I setup all the prerequisities so that I can SSH to the ASA?

Also, can I setup SSH on the selected subnet?  For example, can I do this?

SSH outside 66.102.7.0 255.255.255.0

and

SSH outside 66.102.16.0 255.255.255.0

Thanks.

Laura

Correct Answer
Jon Marshall Mon, 04/05/2010 - 10:28

laurabolda wrote:

Thanks for your prompt response again, Jon.  Your command works.  But, I am not able to SSH to the ASA from my computer 66.102.7.10.  In your previous reply, you said I need to setup the domain name, crypo key generated, etc.  How do I setup all the prerequisities so that I can SSH to the ASA?

Also, can I setup SSH on the selected subnet?  For example, can I do this?

SSH outside 66.102.7.0 255.255.255.0

and

SSH outside 66.102.16.0 255.255.255.0

Thanks.

Laura

Laura

This doc gives the full details for setting up SSH on an ASA firewall -

ASA ssh configuration

Yes you can use a subnet rather than a host entry as you have done above.

Jon


laurabolda Mon, 04/05/2010 - 14:49

Thank you very much, Jon.  Your instructions and documentation work.

Laura

Actions

This Discussion